Russian Cyber Army

Russian Cyber Army is a pro-Russia hacktivist group active in campaigns aligned with Russian geopolitical interests, particularly the war against Ukraine. It has been observed operating in parallel with NoName057(16) since at least late 2022 and is commonly associated with disruptive denial-of-service activity against government and critical-sector targets. Reporting has linked the group to attacks on Ukrainian organizations and to retaliatory operations against foreign states perceived as supporting Ukraine, including attacks on Japanese government websites after Tokyo announced support for Kyiv. The group has also been identified as one of the more active Russian-affiliated entities targeting Ukraine. Its operations are characterized primarily by distributed denial-of-service attacks intended to cause temporary outages and public disruption rather than covert long-term intrusion. Targeting has included government entities, and broader reporting on attacks against Ukraine places activity in critical infrastructure, technology, transportation, energy, media, and education among the affected sectors. Russian Cyber Army is frequently discussed alongside NoName057(16), another pro-Russia hacktivist collective known for DDoS-focused operations, though the two are treated as distinct groups. Available information supports classifying Russian Cyber Army as a politically aligned disruptive actor with hacktivist characteristics rather than a conventional espionage or financially motivated intrusion set.